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Version: 48.0 


Question: 1 


Which two statements about NetFlow version 9 are true? (Choose two.) 


A. It supports ingress and egress flows. 
B. It supports ingress flows only. 

C. It is a Cisco proprietary technology. 
D. It supports egress flows only. 

E. It is IEEE standards based. 

F. It is IETF standards based. 


Answer: AF 


Question: 2 


Refer to the exhibit. 


! 
access-list 100 permit ip host 
100.100.100.3 host 200.200.200.4 
! 

route-map testpolicy permit 10 
match ip address 100 


set ip default next-hop 10.10.10.2 
t 


What is the result of the command set ip default next-hop 10.10.10.2? 


A. It sets the next hop to be the same as the default route. 

B. It sets the next hop to be the interlace with the lowest IP address 

C. It instructs the policy to use the next hop first before resorting to the routing table. 

D. If there is no specific route lot the destination 200.200.200.4 in the routing table the packet is 
policy routed. 


Answer: D 
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Question: 3 


A network engineer has configured an IOS router to synchronize its clock with a Windows server. 
After several minutes, the network engineer notices that the local time on the router does not match 
the time on the windows server. What is the reason for this? 


A. Ether a firewall between the drives or an ACL on the router is blocking TCP port 958. 

B. Either a firewall between the two devices or an ACL on the router is blocking TCP port 123. 
C. Either a firewall between the two devices or an ACL on the router is blocking UDP port 123. 
D. Either a firewall between the two devices or an ACL on the router is blocking UDP port 858. 


Answer: C 


Question: 4 


Which IOS commands can you use to limit the CPU impact of log generation and transmission on an 
IOS router? 


A. You can use the ip access-list logging interval command in conjunction with the logging rate-limit 
command 

B. You can use the ip access-list logging limit command in conjunction with the logging rate-interval 
command 

C. You can use the ip access-list syslog-logging interval command in conjunction with the logging 
rate-limit command 

D. You can use the ip access-list logged interval command in conjunction with the logging rate-limit 
command 


Answer: A 


Question: 5 


Which IOS commands can you use to limit the CPU impact of log generation and transmission on an 
IOS router? 


A. You can use the ip access-list logging interval command in conjunction with the logging rate-limit 
command 

B. You can use the ip access-list logging limit command in conjunction with the logging rate-interval 
command 

C. You can use the ip access-list syslog-logging interval command in conjunction with the logging 
rate-limit command 

D. You can use the ip access-list logged interval command in conjunction with the logging rate-limit 
command 
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Answer: A 


Question: 6 


DRAG DROP 
Drag and drop the statements about authentication, authorization and accounting from the left into 
the correct categories on the right. 


It enforces time periods during which a user can access the 
device. 
E is not supported with local AAA. 
It specifies a user's specific access privileges. 
It supports 2 local database for device access. 


R supports encryption. 


Ih 
HHL 


Tt verifies network usage. 


Answer: 
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Explanation: 

AAA offers different solutions that provide access control to network devices. The following services 
are included within its modular architectural framework: 

+ Authentication — The process of validating users based on their identity and predetermined 
credentials, such as passwords and other mechanisms like digital certificates. Authentication controls 
access by requiring valid user credentials, which are typically a username and password. With 
RADIUS, the ASA supports PAP, CHAP, MS-CHAP1, MS-CHAP2, that means Authentication supports 
encryption. 

+ Authorization — The method by which a network device assembles a set of attributes that regulates 
what tasks the user is authorized to perform. These attributes are measured against a user database. 
The results are returned to the network device to determine the user’s qualifications and 
restrictions. This database can be located locally on Cisco ASA or it can be hosted on a RADIUS or 
Terminal Access Controller Access-Control System Plus (TACACS+) server. In summary, Authorization 
controls access per user after users authenticate. 

+ Accounting — The process of gathering and sending user information to an AAA server used to track 
login times (when the user logged in and logged off) and the services that users access. This 
information can be used for billing, auditing, and reporting purposes. 
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Question: 7 


Which type of information can be seen in the output of the show ip vrf command? 


A. IP addresses 

B. the associated label protocol 
C. route targets 

D. routes within the VRF 

E. the default route distinguisher 


Answer: E 


Question: 8 


Which command configures an interface with an IP address of 192.168.10.1 and a mast of 
255.255.255.0 to participate in the backbone area for OSPF that has a process ID of 51? 


A. network 192.168.10.0 255.255.255.0 area 0 
B. network 192.168.10.0 255.255.255.0 area 51 
C. network 192.168.10.0 0.0.0 255 area 0 

D. network 192.168.10.0 0.0.0.255 area 51 


Answer: B 
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Question: 9 


A network engineer wants to implement an SNMP process for host machines using the strongest 
security available which command accomplishes this task? 


A. router(confi)#snmp-server-host 172-16-200.225 traps v3 

B. router(confi)#snmp-server-host 172-16-200.225 traps v2c auth 
C. router(confi)#snmp-server-host 172-16-200.225 traps v1 

D. router(confi)#snmp-server-host 172-16-200.225 traps v2c 


Answer: A 


Question: 10 


Which device determines the MSS? 


A. sending host 

B. sending host's gateway 
C. receiving host's gateway 
D. receiving host 


Answer: D 
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